The syslog facility calculation is wrong.
I created a Jira issue https://issues.apache.org/jira/browse/FLUME-1427
and submitted a patch.
In short, priority = (facility*8) + severity
severity = priority % 8
facility = (priority - severity) /8 ;
but in SyslogUtils's buildEvent, facility = (priority - severity)
i.e. /8 is missing.
The patch is very small and straight forward, can this be applied on 1.2.0
branch and 1.3.0(trunk)